Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zt8Us-4nsp-BXW-bfOe_iTrNvV4.roa
File: Zt8Us-4nsp-BXW-bfOe_iTrNvV4.roa (raw, json)
Hash identifier: qwleZkBTGaZs6GRbKwSM86rKndM5u9MGkRFnOlSW6Lg=
Subject key identifier: 66:DF:14:B3:EE:27:B2:9F:81:5D:6F:9B:7C:E7:BF:89:3A:CD:BD:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82D31A97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zt8Us-4nsp-BXW-bfOe_iTrNvV4.roa
Signing time: Tue 10 May 2022 15:18:12 +0000
ROA not before: Tue 10 May 2022 15:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2194872983 (0x82d31a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 15:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66df14b3ee27b29f815d6f9b7ce7bf893acdbd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:ba:60:9b:8d:e6:f7:8f:cf:56:5a:cc:2c:
ea:b5:45:8a:2e:87:e2:2b:ff:46:0f:eb:85:ea:4d:
f3:26:b7:3a:ce:95:fa:94:81:36:ed:50:6d:f3:9d:
8e:02:50:f9:26:96:52:85:5a:7e:11:ef:30:93:f5:
6d:a8:d5:fc:b9:a2:cd:bf:37:99:6a:c4:e0:6c:98:
82:a7:56:a3:7f:2d:7f:36:ed:5e:c0:24:b1:9e:aa:
36:a5:17:b8:34:68:e5:48:19:fc:7a:37:36:d3:11:
81:65:32:7e:62:74:45:66:db:5d:60:d7:f3:0d:b3:
8c:e5:02:1d:2c:38:b7:87:23:bc:60:c4:0f:88:26:
44:ad:e7:6d:8d:de:6e:0d:95:ca:92:47:27:02:0c:
6d:87:19:49:c7:41:79:b2:a7:1b:b4:e1:f5:17:9e:
e8:e5:95:71:92:5d:41:59:e9:95:90:4c:cc:41:e5:
1a:78:35:4e:55:7c:fa:85:4a:c9:c4:77:67:e6:77:
ff:1d:25:bb:f9:f2:df:5d:e9:77:ff:6f:06:c1:fa:
28:50:15:d8:27:05:84:fc:cc:fa:cf:41:3b:be:e0:
9c:c7:7d:73:b8:30:27:f2:a8:45:58:c1:0c:67:3e:
bd:74:26:48:5d:95:9d:4d:83:89:bd:7b:fc:8d:c3:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:14:B3:EE:27:B2:9F:81:5D:6F:9B:7C:E7:BF:89:3A:CD:BD:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zt8Us-4nsp-BXW-bfOe_iTrNvV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:f1:85:2e:cb:03:63:16:22:16:66:9a:7f:7f:eb:73:55:89:
59:b7:65:5f:e4:27:cf:39:6d:72:ea:a8:1f:f9:d1:51:bf:00:
4b:1c:2d:f5:57:c6:c8:b5:f2:4a:8e:f4:72:e3:5f:98:81:08:
c4:21:6b:93:d4:7b:4f:a1:37:ef:07:04:f8:5d:5e:8c:e8:97:
c3:1c:8f:e6:67:5f:78:ac:aa:a9:72:ae:45:6e:52:33:d4:f8:
24:b0:6d:90:cf:f4:71:44:86:f1:d4:f6:db:06:2c:55:98:18:
95:df:2b:e5:92:15:24:d9:0d:ae:9d:f6:2d:50:2a:06:b8:1a:
a9:88:b8:d5:37:ab:6c:3d:84:ad:03:d1:c2:87:95:88:32:c5:
ec:8e:93:f4:cd:a7:ba:29:43:c0:a7:6a:62:3b:6a:4a:bf:21:
25:a4:24:b0:be:ed:f0:56:ff:5b:fc:58:e9:22:0d:44:be:85:
60:54:f4:57:0d:f4:af:27:4b:6e:dc:bb:47:22:8f:7e:ab:26:
62:1c:ad:e5:1d:03:54:e4:93:48:49:32:bf:a8:e1:28:7c:44:
a3:29:dc:84:80:35:c7:e8:97:5e:72:ea:de:8a:4d:ba:f8:fe:
b0:c9:e9:99:13:f5:66:80:91:e6:d7:04:82:5d:a0:52:d4:02:
6d:81:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:04:13 2025 by rpki-client